Tenant isolation
Dedicated resources keep EMQX Cloud tenant data separate.
Explore EMQ’s security controls, independent reports, and compliance information.
Dedicated resources keep EMQX Cloud tenant data separate.
EMQX Cloud supports username/password, JWT, and X.509 certificate authentication.
Control access by role, with comprehensive audit logs for all user and system activity.
TLS encrypts all connections. VPC peering and PrivateLink support private network access.
TISAX
TISAX standardizes information security assessments and information exchange across supply chains, with broad use in the automotive industry. EMQ has achieved the VDA-TISAX Information Security High Level (AL2) certification.
SOC 1
SOC 1 reports assess service-organization controls relevant to customers’ financial reporting. Issued under AICPA attestation standards or ISAE 3402, they address system descriptions and control design; Type 2 reports also assess operating effectiveness.
SOC 2 Type 1
SOC 2 reports are regularly refreshed and assess controls relevant to security, availability, processing integrity, confidentiality, or privacy. EMQ currently offers SOC 2 Type 1 reports for EMQX Cloud and EMQX Enterprise.
SOC 2 Type 2
SOC 2 is an independent report assessing a service provider’s services and internal controls under the AICPA framework. EMQ’s SOC 2 compliance reflects controls to protect its systems and data.
ISO/IEC 27001:2022
EMQ adopts ISO/IEC 27001:2022 for information security management. The standard provides a systematic approach to confidentiality, integrity, and availability and supports regulatory and customer requirements.
ISO/IEC 27701:2019
ISO/IEC 27701:2019 extends ISO/IEC 27001 and ISO/IEC 27002 with guidance for handling personal information. EMQ’s adherence to this certification reflects its commitment to privacy and data protection.
ISO/IEC 20000-1:2018
EMQ adopts ISO/IEC 20000-1:2018 for IT service management. The standard sets requirements for establishing, implementing, maintaining, and continually improving service management systems.
ISO 9001:2015
EMQ adopts ISO 9001:2015 for quality management. The standard focuses on consistent products and services, continuous improvement, customer satisfaction, and meeting customer and regulatory requirements.
GDPR readiness
GDPR governs the use and protection of personal data from the European Economic Area (EEA). EMQ is committed to supporting customers’ GDPR compliance efforts.
HIPAA
HIPAA sets standards for protecting sensitive patient health information. EMQ can support HIPAA-related customer data only after a Business Associate Agreement (BAA) has been properly executed with EMQ.